We’ve arrived at this decision point because we have exhausted all the
lower levels of data/information analysis. The assumption here is that we
are confirming the nature of this data/information. This decision point is
where we distinguish between data/information that must reside at a
higher level than Level 5. It may be SECRET data/information by
aggregation or compilation, SECRET NSS data/information, or data/
information that may in further analysis necessitate that it be held in a government hosted and managed private cloud. Level 6 accommodates information that has been determined: (i) pursuant to Executive Order 12958 as amended by Executive Order 13292, or any predecessor Order, to be classified national security information; or (ii) pursuant to the Atomic Energy Act of 1954, as amended, to be Restricted Data (RD).
At this time, only information classified as SECRET, in accordance with the applicable executive orders, is applicable to this level. Services running at higher classification levels, to include compartmented information, are governed by other policies and are beyond the scope of this document. Impact Level 6 requires a similar set of tailored controls as Level 5 and includes the CNSSI 1253 Appendix F, Attachment 5 Classified Information Overlay C/CEs.
